CVE-2012-3032: SQL Injection
SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers to execute arbitrary SQL commands via a crafted SOAP message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3032?
CVE-2012-3032 is classified as a high severity vulnerability due to its potential for remote code execution via SQL injection.
How do I fix CVE-2012-3032?
To fix CVE-2012-3032, users should upgrade to at least Siemens WinCC version 8.0 or apply the appropriate patches provided by Siemens.
Which software is affected by CVE-2012-3032?
CVE-2012-3032 affects Siemens WinCC versions 7.0 SP3 and earlier, as well as SIMATIC PCS7 and versions of WinCC 5.0 through 7.0.
What is the exploit method for CVE-2012-3032?
The exploit method for CVE-2012-3032 involves executing arbitrary SQL commands through a crafted SOAP message.
Are there any known exploits for CVE-2012-3032?
Yes, there are known exploits for CVE-2012-3032 that leverage SQL injection to manipulate database queries.